From: Anthony Messina (amessinamessinet.com)
Date: Thu Feb 02 2006 - 07:59:51 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

nevot wrote:
> You may have a Cisco PIX between the ends?
>
> 2006/1/30, Garrison Hoffman <garrisoncodefix.net
> <mailto:garrisoncodefix.net>>:
>
> I have set up postfix with smtp-auth, recently one user has complained
> that Thunderbird fails with:
>
> "Sending of message failed. An error occurred sending mail: Unable to
> connect to SMTP server cobalt.codefix.net
> <http://cobalt.codefix.net> via STARTTLS since it doesn't
> offer STARTTLS In EHLO response. Please verify that your Mail/News
> account settings are correct and try again."
>
> When I netcat/telnet to port 25 I see:
>
> 250-PIPELINING
> 250-SIZE 10240000
> 250-ETRN
> 250-STARTTLS
> 250 8BITMIME
>
> Whereas he sees:
>
> 250-PIPELINING
> 250-SIZE 10240000
> 250-ETRN
> 250-XXXXXXXA
> 250 8BITMIME
>
> I saw nothing in smtpd.c that indicates "250-XXXXXXXA" to be a valid
> postfix response, so my thinking is that perhaps some proxy or other
> network filter on his end is interfering.
>
> Can anyone shed some light on this?
>
> There are no warnings in my maillog other than "address not listed for
> hostname"
>
> # postconf -n|grep tls
> smtpd_tls_auth_only = yes
> smtpd_tls_cert_file = /etc/courier-imap/imapd.pem
> smtpd_tls_loglevel = 0
> smtpd_tls_received_header = yes
> smtpd_tls_session_cache_timeout = 3600s
> smtpd_use_tls = yes
> tls_random_source = dev:/dev/urandom
>
>

i agree with "nevot," -- the possibility of a cisco router with
smtp/esmtp content based access control. cisco's esmtp does not support
the starttls command. i just had the same issue myself with a cisco 871
vpn router.

--
My Website: http://messinet.com
My Online Gallery:
http://messinet.com/modules.php?name=Web_Links&l_op=visit&lid=3

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]